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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address « 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1)1X1 Responsive to communication(s) filed on 29 October 2007 . 
2a)S This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) £<3 Claim(s) 1-43 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) [X] Claim(s) 1-43 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)Q Some * c)Q None of: 

1 .□ Certified copies of the priority documents have been received. 

2.Q Certified copies of the priority documents have been received in Application No. . 

3-D Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 



1 . Claims 1 - 43 are presented for examination. 



Claim Rejections - 35 USC §101 



2. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or 
any new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and 
requirements of this title. 



Claims 33-43 are rejected under 35 U.S.C. 101 because the claimed invention is directed 
to non-statutory subject matter. As per claim 33, Applicants amended the preamble of the claim 
with "the computer-readable medium being a tangible medium" still remains non-statutory 
subject matter since the specification discloses intrinsic evidence of the computer-readable 
medium could even be paper, as such the subject matter is not limited to a process, machine, 
manufacture, or a composition of matter [ Please see MPEP chapter 2106 ]. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 
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4. Claims 1, 2, 4-8, 11-13, 15-19, 22-24, 26-30, 33-35, 37-41 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Heard et al. [ US Patent Application No 2006/0242685 ], in 
view of Balogh et al. [ US Patent No 7,047,258 ]. 



5. As per claim 1, Heard discloses the invention as claimed including a system for 
automatically updating of computer access settings [ i.e. automatically push the security policy to 
the mobile device ] [810, Figure 8; Abstract; and paragraphs 0027 and 0030 ], comprising: 

at least one computer access setting for a respective user of a computer [ i.e. policy data ] 
[ paragraphs 0054, 0055, Permission Policies and Rule Policies tables ], one version of the at 
least one computer access setting being stored in a remote database [ i.e. LDAP storage 
directory ] [ 108, Figure 1; and paragraphs 0029, 0033, 0044 and 0045 ] and another version of 
the at least one computer access setting being stored in the computer [ i.e. the policy data is 
decrypted and stored in the rules engine store ] [ 612, Figure 6; and paragraph 0061, 0062 and 
0066]; 

a server to communicate with the remote database [ 102, Figure 1; and paragraphs 0027 
and 0028 ]; and 

a control unit to communicate with the server [ i.e. gatekeeper ] [ 104, Figure 1 ; and 
paragraphs 0030 and 0031 ] and to automatically update the versions of the at least one 
computer access settings in the computer and the remote database that is accessible to the server 
to coincide with each other responsive to at least one computer event [ i.e. updating policy 
information and distributing the updated policy information to the mobile device when 
synchronization ] [ 808, 810, Figure 8; paragraphs 0059,.0073, 0074; and claims 1 and 2 ]. 
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Heard does not specifically disclose 

the at least one control access setting being stored in the remote database is updated to 
reflect changes made to the at least one control access setting being stored in the computer and 
vice versa. 

Balogh discloses 

the at least one control access setting being stored in the remote database is updated to 
reflect changes made to the at least one control access setting being stored in the computer and 
vice versa [ i.e. update the different of data in local and remote databases ] [ Figure 10A; col 1 1, 
lines 62-col 12, lines 15; and col 13, lines 27-38 ]. 

It would have been obvious to a person skill in the art at the time the invention was made 
to combine the teaching of Heard and Balogh because the teaching of updating data in Balogh 
would enable the same information to be maintained throughout the system to prevent system 
corruption. 

6. As per claim 2, Heard discloses wherein the at least one computer event includes user 
log-in on the computer and the computer being connected to the Internet [ i.e. mobile device 
initiates data synchronization and gatekeeper authenticates mobile device ] [810, Figure 8; and 
paragraphs 0069, 0072 and 0073 ]. 

7. As per claim 4, Heard discloses wherein the at least one computer event includes the start 
up of the computer and the computer being connected to the Internet [ i.e. re-authenticate after 
device has been turn off] [ Rule Policies table ]. 
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8. As per claim 5, Heard discloses wherein the one version of the computer access settings 
being stored in the remote database maintains the current authorization settings [ i.e. new or 
change policy package ] [ 802, Figure 8; and paragraph 0071 ] and the another version of the 
computer access settings being stored in the computer maintains the latest reporting information 
[ paragraphs 0058, 0059 and 0074 ]. 

9. As per claim 6, Heard discloses wherein the computer access settings contain an allow 
list of information that the respective user is authorized to access [ i.e. list of device that can be 
communicated with ] [ paragraph 0066 ]. 

10. As per claim 7, Heard discloses wherein the computer access settings contain a block list 
of information that the respective user is not authorized to access [ i.e. list of device that cannot 
be communicated with ] [ paragraph 0066 ]. 

11. As per claim 8, Heard discloses wherein the computer access settings specify if the 
respective user is authorized to access a particular computer application [ i.e. control application 
access and use ] [ Permission Policies table; and paragraphs 0032 and 0054 ]. 

12. As per claim 1 1, it is rejected for similar reasons as stated above in claim 1 . Furthermore, 
Heard discloses means for modifying the first version of the computer access setting [ i.e. 
modifying security policy ] [ Figure 8; and paragraphs 0071, 0073 and 0074 ]. 
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13. As per claim 12, Heard discloses wherein the second version of the computer access 
settings contain a history of user computer activity [ i.e. history mobile device user activity ] [ 
paragraphs 0075 and 0076 ], the system further comprising means for transferring the second 
version of the computer access settings to the remote location so that the first version at the 
remote location is updated to include the history of user computer activity contained in the 
second version upon the at least one computer event [ i.e. the log file transfers to the server ] [ 
paragraphs 0058 and 0059 ]. 

14. As per claim 13, it is rejected for similar reasons as stated above in claim 2. 

15. As per claims 15-19, they are rejected for similar reasons as stated above in claims 4-8. 

16. As per claims 22 and 23, they are rejected for similar reasons as stated above in claims 1 1 
and 12. 

17. As per claim 24, it is rejected for similar reasons as stated above in claim 13. 

18. As per claims 26-30, they are rejected for similar reasons as stated above in claims 15-19. 

19. As per claims 33 and 34, they are rejected for similar reasons as stated above in claims 1 1 
and 12. 
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20. As per claim 35, it is rejected for similar reasons as stated above in claim 13. 

21. As per claims 37-41, they are rejected for similar reasons as stated above in claims 15-19. 

22. Claims 3, 9, 10, 14, 20, 21, 25, 31, 32, 36, 42 and 43 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over Heard et al. [ US Patent Application No 2006/0242685 ], in view of 
Balogh et al. [ US Patent No 7,047,258 ], and further in view of Dunn [ US Patent No 7,076,558 

23. As per claim 3, Heard and Balogh do not specifically disclose wherein the at least one 
computer event includes user log-out on the computer and the computer being connected to the 
Internet. Dunn discloses wherein the at least one computer event includes user log-out on the 
computer and the computer being connected to the Internet [ i.e. disconnect ] [ col 37, lines 4-1 1 
]. It would have been obvious to a person skill in the art at the time the invention was made to 
combine the teaching of Heard, Balogh and Dunn because the teaching of Dunn would allow a 
web services user to control access to user-specific information stored in associated with a 
software service offered by a web-service provider [ Dunn, col 1, lines 6-10; and col 2, lines 10- 
21]. 



24. As per claim 9, Dunn discloses wherein the computer access settings specify if the 
respective user is authorized to access a particular web site [ col 39, lines 53-col 41, lines 54 ]. 
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25. As per claim 10, Dunn discloses wherein the computer access settings specify if the 
respective user is authorized to access a category of information that includes computer 
applications and web sites [ col 8, lines 52-61 ]. 

26. As per claim 14, it is rejected for similar reasons as stated above in claim 3. 

27. As per claim 20 and 21 , they are rejected for similar reasons as stated above in claims 9 
and 10. 

28. As per claim 25, it is rejected for similar reasons as stated above in claim 14. 

29. As per claims 31 and 32, they are rejected for similar reasons as stated above in claims 20 
and 21. 

30. As per claim 36, it is rejected for similar reasons as stated above in claim 14. 

31. As per claims 42 and 43, they are rejected for similar reasons as stated above in claims 20 
and 21. 
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32. Applicant's arguments with respect to claims 1-43 have been considered but are moot in 
view of the new ground(s) of rejection. 

33. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Dustin Nguyen whose telephone number is (571) 272-3971. The 
examiner can normally be reached on flex. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nathan Flynn can be reached at (571) 272-1915. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



Dustin Nguyen 




Examiner 
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